$ rpki-client -vvf rpki-repo.registro.br/repo/AAWMCQFvCr77SdCtt1DEK8BLgeZUAvemDWeqzKjGihKP/0/2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.mft File: 2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.mft (raw, json) Hash identifier: 5zrioDkoYPpNP+zkjAMU+xrN+i75dJ25OETOgTyAuLc= Subject key identifier: 36:DC:7F:25:49:F4:FE:F7:CB:EE:56:4A:9E:C5:40:D8:37:E5:4C:4C Authority key identifier: 2F:F4:EE:9C:1F:AF:19:CB:D4:4C:CB:6C:4F:80:3B:54:DA:93:3E:88 Certificate issuer: /CN=2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88 Certificate serial: 67D66CCE9468A68805E1734F821C33568457FB8A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.cer Subject info access: rsync://rpki-repo.registro.br/repo/AAWMCQFvCr77SdCtt1DEK8BLgeZUAvemDWeqzKjGihKP/0/2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.mft Manifest number: 11 Signing time: Mon 03 Nov 2025 11:18:48 +0000 Manifest this update: Mon 03 Nov 2025 11:13:48 +0000 Manifest next update: Tue 04 Nov 2025 13:21:48 +0000 Files and hashes: 1: 3230302e32332e3131382e302f32342d3234203d3e20323635343439.roa (hash: u0emmR/IrSgxU4xnl7NMDDuW67Pa/pzAKWRg8XfABIw=) 2: 2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.crl (hash: cNOfqGZ9JTZEWtvZD939atwZ1jByX1k5uKjd/rjPabk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AAWMCQFvCr77SdCtt1DEK8BLgeZUAvemDWeqzKjGihKP/0/2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.crl rsync://rpki-repo.registro.br/repo/AAWMCQFvCr77SdCtt1DEK8BLgeZUAvemDWeqzKjGihKP/0/2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 12:48:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:d6:6c:ce:94:68:a6:88:05:e1:73:4f:82:1c:33:56:84:57:fb:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88 Validity Not Before: Nov 3 11:13:48 2025 GMT Not After : Nov 4 13:21:48 2025 GMT Subject: CN=36DC7F2549F4FEF7CBEE564A9EC540D837E54C4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d7:39:67:1f:cd:86:22:d8:c2:ef:e8:69:92: 65:69:a7:95:dd:cd:f7:fa:28:fb:2c:0f:0a:e2:3b: e0:11:94:41:fb:64:0f:a8:e1:8d:a7:31:df:bb:ba: db:df:bc:99:16:7b:68:f9:1a:3d:1e:1f:fb:be:88: 1a:bb:61:f6:19:3c:93:04:0e:dc:96:25:38:82:0c: 74:1d:30:6f:68:42:c7:b8:aa:82:c9:63:13:e2:74: 5d:e1:0c:78:ee:2a:8a:73:9d:17:3a:46:31:b7:61: 3d:83:e6:0b:64:3b:c4:40:b9:42:0f:65:b0:61:7b: 78:4d:83:73:76:41:96:f2:9f:55:4a:f3:73:97:0a: 5b:cb:59:73:20:b4:b4:d9:7f:0a:4a:57:f2:9f:47: 1c:ee:99:c3:fe:a1:04:24:b4:de:57:11:ea:50:59: 2c:6e:40:7e:bf:59:5e:0c:2a:dc:5a:76:57:a1:43: 4a:ba:23:46:51:2e:21:df:7b:a0:12:40:a4:b8:9b: 5e:54:ff:7c:99:02:4d:6f:f7:f0:6c:bb:f1:f4:6b: 95:3e:02:01:19:99:a2:e9:a8:41:78:a8:d8:21:18: f3:2d:b9:af:92:da:a2:46:be:80:d3:4b:d7:4b:b6: 69:f0:33:cc:82:c6:2f:19:1d:18:f8:f3:7f:89:bb: 4f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:DC:7F:25:49:F4:FE:F7:CB:EE:56:4A:9E:C5:40:D8:37:E5:4C:4C X509v3 Authority Key Identifier: keyid:2F:F4:EE:9C:1F:AF:19:CB:D4:4C:CB:6C:4F:80:3B:54:DA:93:3E:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AAWMCQFvCr77SdCtt1DEK8BLgeZUAvemDWeqzKjGihKP/0/2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAWMCQFvCr77SdCtt1DEK8BLgeZUAvemDWeqzKjGihKP/0/2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:60:d1:71:08:85:48:78:e1:8f:be:87:bd:b7:52:f6:1e:86: 4b:71:e9:57:23:d2:56:e5:ec:25:7a:8b:a8:0b:3b:7d:74:b5: 10:21:67:ce:cd:d9:15:02:89:55:a7:9b:32:00:17:07:c2:60: f1:72:a6:53:16:76:fc:de:26:2a:63:e6:d8:3c:e9:55:e8:25: 03:de:b0:00:ad:b9:d3:7e:fa:ad:e9:04:04:66:d8:1a:67:eb: 89:0d:41:70:b4:f0:77:cd:6f:c5:63:44:e2:c7:b7:19:d8:99: 06:62:1a:2f:ec:2b:af:cb:51:20:2b:c4:9a:04:7e:19:c8:10: 64:3d:29:0f:84:d9:f2:b8:08:59:cf:85:71:45:8f:d6:b5:b8: 9a:31:58:6f:0c:e8:68:6a:27:1c:ff:b0:0c:14:7a:ed:d4:17: 68:e9:d1:b6:59:96:a0:68:2f:9d:85:fd:79:37:c6:7f:65:e2: 62:e1:85:c7:ae:71:1a:5d:d6:cb:72:ff:9b:ca:40:11:3a:02: 81:9d:a1:29:b0:cb:5a:df:38:22:3e:dd:4c:25:d2:c1:6c:84: 75:64:c8:7e:02:c8:67:b5:79:e6:7e:8f:f7:ed:8a:89:49:c3: f9:f7:40:07:2b:8a:c5:ab:28:26:13:6e:e6:64:0e:a0:4d:0c: 6f:47:6b:02 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZ9ZszpRopogF4XNPghwzVoRX+4owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZGNEVFOUMxRkFGMTlDQkQ0NENDQjZDNEY4MDNCNTRE QTkzM0U4ODAeFw0yNTExMDMxMTEzNDhaFw0yNTExMDQxMzIxNDhaMDMxMTAvBgNV BAMTKDM2REM3RjI1NDlGNEZFRjdDQkVFNTY0QTlFQzU0MEQ4MzdFNTRDNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC01zlnH82GItjC7+hpkmVpp5Xd zff6KPssDwriO+ARlEH7ZA+o4Y2nMd+7utvfvJkWe2j5Gj0eH/u+iBq7YfYZPJME DtyWJTiCDHQdMG9oQse4qoLJYxPidF3hDHjuKopznRc6RjG3YT2D5gtkO8RAuUIP ZbBhe3hNg3N2QZbyn1VK83OXClvLWXMgtLTZfwpKV/KfRxzumcP+oQQktN5XEepQ WSxuQH6/WV4MKtxadlehQ0q6I0ZRLiHfe6ASQKS4m15U/3yZAk1v9/Bsu/H0a5U+ AgEZmaLpqEF4qNghGPMtua+S2qJGvoDTS9dLtmnwM8yCxi8ZHRj483+Ju0/DAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUNtx/JUn0/vfL7lZKnsVA2DflTEwwHwYDVR0j BBgwFoAUL/TunB+vGcvUTMtsT4A7VNqTPogwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQUFXTUNRRnZDcjc3U2RDdHQxREVLOEJMZ2VaVUF2ZW1EV2VxektqR2lo S1AvMC8yRkY0RUU5QzFGQUYxOUNCRDQ0Q0NCNkM0RjgwM0I1NERBOTMzRTg4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGRjRFRTlDMUZBRjE5Q0JE NDRDQ0I2QzRGODAzQjU0REE5MzNFODguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QUFXTUNRRnZDcjc3U2RDdHQxREVLOEJMZ2VaVUF2ZW1EV2VxektqR2loS1AvMC8y RkY0RUU5QzFGQUYxOUNCRDQ0Q0NCNkM0RjgwM0I1NERBOTMzRTg4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFWDRcQiFSHjhj76HvbdS9h6GS3HpVyPSVuXsJXqLqAs7fXS1ECFnzs3ZFQKJ VaebMgAXB8Jg8XKmUxZ2/N4mKmPm2DzpVeglA96wAK250376rekEBGbYGmfriQ1B cLTwd81vxWNE4se3GdiZBmIaL+wrr8tRICvEmgR+GcgQZD0pD4TZ8rgIWc+FcUWP 1rW4mjFYbwzoaGonHP+wDBR67dQXaOnRtlmWoGgvnYX9eTfGf2XiYuGFx65xGl3W y3L/m8pAEToCgZ2hKbDLWt84Ij7dTCXSwWyEdWTIfgLIZ7V55n6P9+2KiUnD+fdA ByuKxasoJhNu5mQOoE0Mb0drAg== -----END CERTIFICATE-----Generated at Mon Nov 3 12:11:40 2025 by rpki-client